The project is young, with only two releases and no commits or active maintainers in the last three months. Its organization-backed repository is current and the package includes usable documentation, but testing and security coverage are limited.
62%
Total Score
50
100
88
50
The repository had zero commits and zero active maintainers during the last three months, a meaningful warning that recent maintenance has stalled.
A post-autoload-dump install-time script adds execution during dependency installation, creating a modest supply-chain and installation-complexity concern.
The package is only 211 days old and has two releases, with roughly 83 days between them, so its maintenance record is still limited rather than mature.
There is only one open issue and no issue or pull-request activity in the last month, providing little evidence of ongoing community maintenance.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a project-level hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0 | ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.